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SUBJECT SENDS MESSAGE TO 
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CONTAINING UNSIGNED 
CERTIFICATE AND REQUESTING 
THAT A SHORT-TERM DISPOSABLE 
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TERM DISPOSABLE 
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OBTAINS UNSIGNED 
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SUBJECT/CLIENT SENDS A MESSAGE TO 
CREDENTIALS SERVER CONTAINING 
UNSIGNED CERTIFICATE AND REQUESTING 
THAT A SHORT-TERM DISPOSABLE 
CERTIFICATE BE ISSUED AGAINST 
UNSIGNED CERTIFIGATE 



CREDENTIALS SERVER COMPUTES 
CRYPTOGRAPHIC HASH OF UNSIGNED 
CERTIFICATE AND VERIFIES THAT THE 
COMPUTED CRYPTOGRAPHIC HASH IS 
PRESENT IN HASH TABLE 
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SUBJECT/CLIENT CLOSES ALL FOLDERS IN 
SHORT-TERM DISPOSABLE CERTIFICATE 
EXCEPT THE FOLDER THAT CONTAINS 
INFORMATION NEEDED BY THE 
VERIFIER/APPLICATION FOR AUTHORIZATION 
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